IG Japan Apologizes for Mishandling Customer Personal Data
IG Securities publicly apologized today for lapses in managing sensitive customer information. The issue involved unauthorized access within the IG Group and improper storage on an external server. IG Japan is the Japanese arm of global trading giant IG Group.
Incident Details
The problem stemmed from IG Markets Limited (IGM), an external contractor for IG Securities. Some IG Group employees—outside those authorized for data input and storage—could electronically view customer specifics like names, dates of birth, gender, addresses, phone numbers, email addresses, and My Numbers (Japan’s social security equivalent). This access exceeded what their roles required.
Separately, customer data landed on a cloud provider’s external server managed by IGM, without IG Securities’ approval. Cloud staff couldn’t access it, but the storage violated protocols. No leaks outside the IG Group have been confirmed so far.
Scope of the Breach
Unauthorized Views: 162,879 entries became viewable in IG Group systems. This covers all customers who shared My Numbers with IG Securities up to February 24, 2026, when IGM finished initial fixes.
External Storage: 29,734 entries sat on the cloud server until deletion.
IG Securities acted quickly after discovery. It directed IGM to tweak the system, and data was wiped from the cloud server on March 5, 2026.
Regulatory Response and Root Cause
The firm notified key Japanese authorities, including the Kanto Local Finance Bureau, Ministry of Agriculture, Forestry and Fisheries, Ministry of Economy, Trade and Industry, Japan Securities Dealers Association, Financial Futures Association of Japan, Japan Commodity Futures Association, and Personal Information Protection Commission.
In simple terms, IG Securities admitted weak oversight of contractor IGM as the core issue. Though, it vowed tighter controls moving forward.
Future Safeguards
For new account openings, customers’ My Numbers will temporarily sit in IGM’s overseas data zone during reviews. Once approved, they’ll shift to IG Securities’ Japan-based servers for secure, in-house management.
About IG Group
Stuart Wheeler Founded IG Group in 1974. IG Group is a global online trading and investment services provider. The company offers access to approximately 19,000 financial markets. It serves over 240,000 clients worldwide. IG Group promotes financial freedom through its innovative trading platforms and educational ecosystem.
Wrapping Up
The incident shows ongoing fintech challenges in data privacy, especially with cross-border contractors and cloud storage. No external breach occurred, and fixes are in place, but this shows the need for vendor supervision in trading platforms.
Register your company now and get featured on our homepage!
